Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139332e38302e302f32302d3234203d3e20323632363539.roa
File:                     3138362e3139332e38302e302f32302d3234203d3e20323632363539.roa (raw, json)
Hash identifier:          JdcqyOd24AAsdYVVJXGjsw7E0veWWBYipDzK6k2trLY=
Subject key identifier:   1A:2E:36:20:00:00:50:99:76:CF:26:FA:10:3C:71:E5:86:9E:AA:0D
Certificate issuer:       /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial:       061EA0C21CEB638B6C9E944289629E843394F70C
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139332e38302e302f32302d3234203d3e20323632363539.roa
Signing time:             Thu 31 Oct 2024 17:14:14 +0000
ROA not before:           Thu 31 Oct 2024 17:09:14 +0000
ROA not after:            Thu 30 Oct 2025 17:14:14 +0000
asID:                     262659
IP address blocks:        186.193.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1e:a0:c2:1c:eb:63:8b:6c:9e:94:42:89:62:9e:84:33:94:f7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
        Validity
            Not Before: Oct 31 17:09:14 2024 GMT
            Not After : Oct 30 17:14:14 2025 GMT
        Subject: CN=1A2E36200000509976CF26FA103C71E5869EAA0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:52:05:39:52:76:ac:94:e5:83:be:ad:29:
                    79:42:2d:e0:4a:73:aa:4c:3c:9b:65:4f:e0:18:57:
                    02:90:3e:7c:49:12:11:6b:08:3f:2f:90:ef:7d:d4:
                    aa:64:57:ce:7b:48:85:68:be:9b:e1:92:9e:48:11:
                    4e:9d:5f:e1:ea:e5:6b:01:6a:6e:89:04:17:fa:d8:
                    c4:37:a2:dc:90:12:08:47:3b:b6:24:55:3e:03:49:
                    21:8a:f9:6d:87:17:80:e3:cd:bc:b6:0e:62:ba:f7:
                    dd:63:ce:6d:a6:73:80:94:69:fe:b6:d2:3a:96:bb:
                    b3:6c:be:69:44:45:31:f8:68:60:78:81:ad:ca:49:
                    a1:1a:9b:7c:92:4c:bf:bc:5d:38:22:42:fb:33:08:
                    ec:6f:ea:b4:18:31:e2:dc:43:96:c4:92:5d:78:83:
                    5f:59:bb:97:2a:e4:e8:90:5a:dc:da:7c:6c:38:53:
                    22:c3:23:2b:e5:ce:b6:86:22:77:c4:7f:c1:1e:25:
                    ee:0c:e7:4c:a5:62:e5:70:5d:a3:88:8d:c5:04:d7:
                    bb:69:9d:9b:0e:5e:da:35:d9:c6:cd:de:65:da:62:
                    0e:4b:5f:d7:ed:bb:b7:c7:97:f8:73:91:28:e8:65:
                    1f:2c:c6:38:98:09:e2:af:54:55:3b:20:5e:8a:12:
                    b7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2E:36:20:00:00:50:99:76:CF:26:FA:10:3C:71:E5:86:9E:AA:0D
            X509v3 Authority Key Identifier:
                keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138362e3139332e38302e302f32302d3234203d3e20323632363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:05:cd:22:e4:2f:98:31:e0:2d:c6:bc:f4:0f:1c:51:67:86:
         9d:bb:b7:81:af:72:cc:30:e8:d3:3c:fe:2f:43:71:2e:33:8b:
         56:34:4d:ab:91:00:ea:cc:c6:28:71:e5:51:08:42:62:ff:11:
         35:91:c6:4b:fa:2f:85:03:9d:b8:f0:d1:5a:f7:b2:0b:5f:e4:
         5c:ec:ed:70:7f:3f:f8:6d:46:35:d3:06:39:5f:31:01:8a:0c:
         dc:3b:0f:8b:98:90:b3:bd:53:aa:33:78:74:5b:4a:4b:1d:4b:
         19:2a:47:d8:bf:39:05:be:6f:7f:11:4a:af:14:79:03:ee:af:
         12:f5:b5:60:56:39:38:4e:12:1c:2a:7d:8d:a4:45:79:93:1b:
         c2:b1:d8:d3:8c:ab:05:e9:ae:dc:71:0f:70:eb:4e:2d:91:7f:
         2a:d9:b3:dd:79:2a:62:44:de:c2:bc:77:0a:94:1d:05:1e:a9:
         d1:15:a0:dc:04:f2:11:2f:73:74:db:d7:96:40:cb:1f:3a:d6:
         8d:2e:d9:ce:57:cb:d6:cc:ae:08:8a:86:10:2d:6b:4c:2d:3a:
         a6:af:9b:61:b2:f8:d9:16:fc:30:38:60:f4:fe:d5:df:a5:22:
         90:0a:75:2b:5b:b7:72:66:a0:ca:07:5d:ff:57:12:23:ac:f1:
         16:87:86:c9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBh6gwhzrY4tsnpRCiWKehDOU9wwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzOTRGOTkwMDdDRDE3MkMwODMyRjg0MTVGNjg0MkEx
NDc1MTczRDAeFw0yNDEwMzExNzA5MTRaFw0yNTEwMzAxNzE0MTRaMDMxMTAvBgNV
BAMTKDFBMkUzNjIwMDAwMDUwOTk3NkNGMjZGQTEwM0M3MUU1ODY5RUFBMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmq1IFOVJ2rJTlg76tKXlCLeBK
c6pMPJtlT+AYVwKQPnxJEhFrCD8vkO991KpkV857SIVovpvhkp5IEU6dX+Hq5WsB
am6JBBf62MQ3otyQEghHO7YkVT4DSSGK+W2HF4Djzby2DmK6991jzm2mc4CUaf62
0jqWu7NsvmlERTH4aGB4ga3KSaEam3ySTL+8XTgiQvszCOxv6rQYMeLcQ5bEkl14
g19Zu5cq5OiQWtzafGw4UyLDIyvlzraGInfEf8EeJe4M50ylYuVwXaOIjcUE17tp
nZsOXto12cbN3mXaYg5LX9ftu7fHl/hzkSjoZR8sxjiYCeKvVFU7IF6KEreJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGi42IAAAUJl2zyb6EDxx5Yaeqg0wHwYDVR0j
BBgwFoAULzlPmQB80XLAgy+EFfaEKhR1Fz0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMi8yRjM5NEY5OTAwN0NEMTcyQzA4MzJGODQxNUY2ODQyQTE0NzUxNzNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMzk0Rjk5MDA3Q0QxNzJD
MDgzMkY4NDE1RjY4NDJBMTQ3NTE3M0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzIv
MzEzODM2MmUzMTM5MzMyZTM4MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS6wVAwDQYJKoZIhvcNAQELBQADggEBACsFzSLk
L5gx4C3GvPQPHFFnhp27t4Gvcsww6NM8/i9DcS4zi1Y0TauRAOrMxihx5VEIQmL/
ETWRxkv6L4UDnbjw0Vr3sgtf5Fzs7XB/P/htRjXTBjlfMQGKDNw7D4uYkLO9U6oz
eHRbSksdSxkqR9i/OQW+b38RSq8UeQPurxL1tWBWOThOEhwqfY2kRXmTG8Kx2NOM
qwXprtxxD3DrTi2RfyrZs915KmJE3sK8dwqUHQUeqdEVoNwE8hEvc3Tb15ZAyx86
1o0u2c5Xy9bMrgiKhhAta0wtOqavm2Gy+NkW/DA4YPT+1d+lIpAKdStbt3JmoMoH
Xf9XEiOs8RaHhsk=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:25 2025 by rpki-client